CSF dosent Load on WHM after upgrade to 8.17 (RESOLVED After Update)

[qlpqlp]

Hello,

( Its resolved after the new update )
After today latest auto upgrade to 8.17, CSF dosent load on WHM/cPanel it keeps loading

UPDATE "Temporary Solution":

After I SSH and execute csf -r, the process didnt completed, andI watched the logs:

Apr 4 20:08:59 xxx lfd[1009283]: *Error* Excessive number of children (201), restarting lfd...
Apr 4 20:08:59 xxx lfd[1009283]: daemon restart requested
## ....
Apr 4 20:08:59 xxx lfd[835649]: HUP
Apr 4 20:08:59 xxx lfd[834316]: HUP
Apr 4 20:08:59 xxx lfd[835649]: daemon stopped
## ... lots of repeted logs like above for 1 minute
Apr 4 20:09:01 xxx lfd[837912]: daemon started on xx.xx.xx - csf v8.17 (cPanel)
Apr 4 20:09:01 xxx lfd[837912]: CSF Tracking...
Apr 4 20:09:01 xxx lfd[837912]: IPv6 Enabled...
Apr 4 20:09:01 xxx lfd[837912]: LOAD Tracking...
Apr 4 20:09:01 xxx lfd[837912]: Country Code Lookups...
Apr 4 20:09:01 xxx lfd[837912]: Country Code Ignores...
Apr 4 20:09:01 xxx lfd[837912]: Email Script Tracking...
Apr 4 20:09:01 xxx lfd[837912]: Email Queue Tracking...
Apr 4 20:09:01 xxx lfd[837912]: Email Relay Tracking...
Apr 4 20:09:01 xxx lfd[837912]: Temp to Perm Block Tracking...
Apr 4 20:09:02 xxx lfd[837912]: System Statistics...
Apr 4 20:09:03 xxx lfd[837912]: Port Scan Tracking...
Apr 4 20:09:03 xxx lfd[837912]: Connection Tracking...
Apr 4 20:09:03 xxx lfd[837912]: Account Tracking...
Apr 4 20:09:03 xxx lfd[837912]: SSH Tracking...
Apr 4 20:09:03 xxx lfd[837912]: SU Tracking...
Apr 4 20:09:03 xxx lfd[837912]: Console Tracking...
Apr 4 20:09:03 xxx lfd[837912]: WHM Tracking...
Apr 4 20:09:03 xxx lfd[837912]: Watching /var/log/maillog...
Apr 4 20:09:03 xxx lfd[837912]: Watching /var/log/exim_mainlog...
Apr 4 20:09:03 xxx lfd[837912]: Watching /var/log/messages...
Apr 4 20:09:03 xxx lfd[837912]: Watching /var/log/secure...
Apr 4 20:09:03 xxx lfd[837912]: Watching /usr/local/cpanel/logs/login_log...
Apr 4 20:09:03 xxx lfd[837912]: Watching /usr/local/apache/logs/error_log...
Apr 4 20:09:03 xxx lfd[837912]: Watching /usr/local/cpanel/logs/access_log...

### then CSF was not runing (Firewall Check was showing: csf running check iptables is not configured. You need to start csf) but LFD was OK, but I could finally access on WHM CSF GUI, so I killed all CSF processes runing after I did an Quick Restart, and it seams ok now:

Apr 4 20:26:21 xxx lfd[837912]: csf (re)start requested - running *csf startup*...
Apr 4 20:26:23 xxx lfd[837912]: csf (re)start completed

Thanks anyway

Thanks in advance,
PauloV

[puppet]

I noticed the same issue on several cpanel servers with 8.17. The CSF page in WHM is blank.
Restart CSF stuck at:

csf: FASTSTART loading Packet Filter (IPv4)
DROP all opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0
INVALID tcp opt -- in !lo out * 0.0.0.0/0 -> 0.0.0.0/0
INVALID tcp opt -- in * out !lo 0.0.0.0/0 -> 0.0.0.0/0

Suppose it should load csf.deny next.

[qlpqlp]

Just kill all CSF running processes and then restart CSF

[qlpqlp]

Sorry I have cheked again and its again stuck on all our servers, WHM CSF GUI dosent load again.

Its seams its stuck trying to:

/usr/local/cpanel/3rdparty/bin/perl /usr/sbin/csf -d XX.XX.XX.XX lfd: (PERMBLOCK) XX.XX.XX.XX (XXXXX/XXXXX) has had more than 2 temp blocks in the last 86400 secs

The only temporary solution is to kill all CSF processes and restart again CSF

Any news on an update?

Regards,
PV

[ForumAdmin]

There's nothing we can do unless someone logs a ticket on our helpdesk with access to a server and instructions on how to replicate the problem that we can see this happening on as we are unable to replicate the issue.

[qlpqlp]

Also we have hundreds of processes runing like this:

lfd - (child) blocking XX.XX.XX.XX
lfd - (child) blocking XX.XX.XX.XX
lfd - (child) blocking XX.XX.XX.XX
lfd - (child) blocking XX.XX.XX.XX
lfd - (child) blocking XX.XX.XX.XX
...

I have done now was:

csf --lfd restart
csf -ra

Its running OK now.

lets see if it works

[ForumAdmin]

We've release v8.18 with a fix which will hopefully address this issue if you can kill all instances of csf and upgrade.

[sobeinfo]

We've release v8.18 with a fix which will hopefully address this issue if you can kill all instances of csf and upgrade.

How can I stop all processes of CSF if I cannot access the CSF interface?

[puppet]

We've release v8.18 with a fix which will hopefully address this issue if you can kill all instances of csf and upgrade.

How can I stop all processes of CSF if I cannot access the CSF interface?

SSH to the server, then run following command to kill all lfd process

csf --lfd restart

Update csf with this command:

csf -u

[qlpqlp]

Hello,

Thanks

It seams is 100% resolved after the update

Regards,
PV